
$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
File: mOHsvUXXh5-byUOfTGwvJxStNvU.mft (raw, json)
Hash identifier: gI68qhex2p96HM6Stwf55K0l3ZYQsdcuwD48HP7+EgI=
Subject key identifier: 91:D9:E6:06:FF:DE:08:25:B0:CE:5B:FB:2F:F8:DC:19:2C:A9:F3:59
Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Certificate serial: 05A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
Manifest number: 0574
Signing time: Tue 24 Mar 2026 23:04:58 +0000
Manifest this update: Tue 24 Mar 2026 23:04:58 +0000
Manifest next update: Tue 31 Mar 2026 23:04:58 +0000
Files and hashes: 1: mOHsvUXXh5-byUOfTGwvJxStNvU.crl (hash: wTFgTGUIZ73bTA/mqqWyAOuLek9MdhQQzbP4t6GbiiY=)
2: 3B943DB8A12F11EF8A121F33C4F9AE02.roa (hash: vfcF0bfj5f7fHhybVhZoEvWXgyU0bcXi3S8IUTcQGcY=)
3: 5A67D452A12F11EF8CA59833C4F9AE02.roa (hash: TVZEMQkioXWbGgb416Q+WbjBATZ2qWj4T5UhR1U0HoA=)
4: 4C304B9EA12F11EFBF514933C4F9AE02.roa (hash: 0Gbb0BT+CXcDAGbYX1J3w1Q6o3JO49oKQ4hxn8ma1BU=)
5: 29B935BCA12F11EF9FAFE232C4F9AE02.roa (hash: 0/hOs1+Gw2kOj/gVSsHXvPp7pFaBfQWH4cxGU9ZxhuY=)
6: 6762893A976211EFA4D0606CC4F9AE02.roa (hash: QpQEr+aD8Qpv2jpbszrfucjyacJLO26lGLjGcWeLIds=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl
rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1446 (0x5a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91623B9, serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Validity
Not Before: Mar 24 23:04:58 2026 GMT
Not After : Mar 31 23:04:58 2026 GMT
Subject: CN=69c3189a-e3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:7e:e4:02:51:6c:0e:8f:82:65:29:90:92:
6c:ae:ca:50:bc:20:6f:73:9d:a5:ea:ee:16:c9:db:
da:15:27:25:f7:e9:22:75:53:89:be:bb:0f:f1:f4:
a1:a1:45:b8:fb:c9:2e:bf:63:2d:3b:19:cc:27:51:
55:6a:b8:fd:a7:ff:d5:3e:b6:e9:13:c1:2b:03:c2:
1c:e9:6f:f0:d3:6c:60:f4:f5:c9:b9:0b:12:ae:a4:
f8:94:ad:05:de:da:50:49:7e:bd:94:41:7f:4a:cb:
4a:d8:4c:48:75:c3:9c:7a:2e:8c:ab:15:55:bc:ed:
0b:10:ad:60:e9:8a:b4:8f:d5:8f:0a:03:55:d7:07:
75:5d:b4:f0:51:dc:58:d0:ec:e4:09:e5:3e:a0:30:
34:38:a7:fd:e3:70:97:0e:d8:fc:a0:77:2e:a7:bb:
27:b2:21:4f:7a:60:ac:3c:4c:cb:b7:43:cc:4d:78:
92:8e:a5:61:38:d8:c3:30:73:c3:9c:de:b1:0b:b0:
ec:ce:21:7c:3f:eb:e6:df:03:fd:a1:3a:99:e2:74:
1f:d2:1b:b0:44:49:6f:b3:23:2c:0c:8a:00:0f:d5:
17:b8:1f:cc:9a:b8:f4:29:2e:cb:5d:ad:42:c3:bb:
77:62:f5:a6:8e:59:56:54:62:7a:5c:a5:8d:e3:a2:
31:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D9:E6:06:FF:DE:08:25:B0:CE:5B:FB:2F:F8:DC:19:2C:A9:F3:59
X509v3 Authority Key Identifier:
keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:f0:a2:85:b0:14:ef:65:81:bb:a6:3a:04:a8:c5:ee:5f:12:
67:40:b2:7d:5d:84:33:4e:91:b5:b1:82:ad:ec:91:46:b0:c8:
ec:59:cc:f2:da:fe:2f:0e:9b:d9:86:73:c5:1a:dc:88:37:00:
c9:41:a7:f7:a7:61:09:db:24:cf:4a:00:17:3c:01:10:9b:00:
06:12:72:bd:a9:f9:14:08:d0:7e:a0:34:6f:96:3a:78:47:6c:
26:8c:13:fa:bf:f7:7c:fe:76:c3:16:6b:af:6a:b3:1e:72:3b:
da:bb:e0:63:1e:89:86:4f:e5:aa:55:a3:b3:ed:24:01:fe:9b:
55:05:8d:8a:b6:4f:32:78:10:81:54:13:91:fd:be:dc:ad:83:
f4:61:d9:e3:50:34:33:e2:c5:0a:4e:4c:ed:68:af:de:94:67:
39:94:be:2e:e5:4a:97:1f:5c:97:e1:c0:cf:ec:18:90:30:56:
37:2e:15:28:4d:f8:23:b5:f5:dd:37:67:23:2a:51:bb:e3:90:
42:b8:5e:86:92:33:05:bf:29:fc:2d:0a:d3:ef:17:ca:51:67:
64:1b:1c:d9:18:fa:51:01:64:50:d9:be:1f:6d:8d:53:ef:c7:
3d:90:cb:71:1e:b9:f1:ef:fa:6f:b1:1c:40:cc:d3:fc:c5:10:
83:40:e3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:29 2026 by rpki-client